eb42deddc603e282f8858439e650e30e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb42deddc603e282f8858439e650e30e_JaffaCakes118
Size

250KB
MD5

eb42deddc603e282f8858439e650e30e
SHA1

29ae81592f82be338f94fd7552aa41320e20970d
SHA256

5693a21b4ce5d54540feaec639dd27055991eab81658946ac8cea90bf8d8203b
SHA512

54549f4a2519cb0e5e97027738056666cd7099e076c0b3de913213a93dc3c5d2936b9c9e4f4596394ef93652053e432a042a778761de098fdbcb050dc25cdc3c
SSDEEP

6144:XxRy5EPEahzwf0gYR5z7eLr4CU0/DN479Y69ZJaIdf2cBu:XxRQf0gipkr4C/Z4pY+aIdf2cBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb42deddc603e282f8858439e650e30e_JaffaCakes118

Files

eb42deddc603e282f8858439e650e30e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.ro
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gl
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pbr
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ